Cyberfeed6Cyber incidents across IT, OT and crypto

All incidents

ITDisruptionDeveloping

Ahold Delhaize says a cyberattack disrupted services in Europe and the US

October 12, 2026 (October 12 to 22, 2026)

The parent company of Food Lion, Stop & Shop and Hannaford said in mid-October it was dealing with a cybersecurity issue and took some systems offline, including brand websites and apps, while stores stayed open. On October 19 it said the investigation had confirmed the incident was caused by the malicious actions of others, that it had filed a police report with the Dutch police, and that it had found no evidence that any sensitive customer, associate or partner data was taken. The investigation continues. Its European brands Albert Heijn, Etos and Gall & Gall and its Belgian e-commerce were back online, and the US banners' websites and apps returned on October 20 after at least eight days. Unfulfilled online orders were refunded. Public reporting still names no attacker and does not say whether systems were encrypted. Ahold Delhaize said early on that it saw no reason to link the incident to the French refrigeration attacks. It is the second major attack on the group since a November 2024 breach that exposed data on about 2.2 million people. On November 2 its Delhaize brand, whose stores in Belgium and Luxembourg were among those hit by a new wave of refrigeration failures, said it is investigating whether that incident is linked to the October attack.

Why it matters

Retail groups depend on shared back-end systems, so a precautionary shutdown can disrupt many brands at once.

What defenders can take from it

  • Practice running the business with e-commerce and shared systems offline, and decide in advance who can order a shutdown.

Sources